Skip to content

Commit

Permalink
minor #1377 Simplify the configuration of logout CSRF protection (ros…
Browse files Browse the repository at this point in the history
…ier)

This PR was merged into the main branch.

Discussion
----------

Simplify the configuration of logout CSRF protection

Commits
-------

a9ed1f8 Simplify the configuration of logout CSRF protection
  • Loading branch information
javiereguiluz committed Dec 8, 2022
2 parents c668648 + a9ed1f8 commit 3965fa3
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions config/packages/security.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -53,10 +53,8 @@ security:
path: security_logout
# The name of the route to redirect to after logging out
target: homepage

# Secure the logout against CSRF
csrf_parameter: logout
csrf_token_generator: security.csrf.token_manager
enable_csrf: true

# needed because in tests we redefine the 'main' firewall to use
# HTTP Basic instead of the login form, so this firewall has
Expand Down

0 comments on commit 3965fa3

Please sign in to comment.